Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/7WhTLv9VRFJFovVaZeI2mQQ5Ocs.roa
File: 7WhTLv9VRFJFovVaZeI2mQQ5Ocs.roa (raw, json)
Hash identifier: fFSQL2c+ViJkUi5pWwvMLrLVM/0ulSqW7Ng/IynBZFg=
Subject key identifier: ED:68:53:2E:FF:55:44:52:45:A2:F5:5A:65:E2:36:99:04:39:39:CB
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 0189F2AFDC9194CDCF4A86A1687111E44E5F
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/7WhTLv9VRFJFovVaZeI2mQQ5Ocs.roa
Signing time: Mon 14 Aug 2023 06:15:58 +0000
ROA not before: Mon 14 Aug 2023 06:15:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 89.42.81.0/24 maxlen: 24
89.42.80.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 14 Aug 2023 14:19:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:f2:af:dc:91:94:cd:cf:4a:86:a1:68:71:11:e4:4e:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Aug 14 06:15:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ed68532eff55445245a2f55a65e23699043939cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:a4:c9:37:da:0c:94:fa:a6:71:bf:2d:95:32:
a5:9a:06:f1:6c:7b:60:e8:52:69:5f:ee:61:5f:11:
66:de:d4:f4:58:8f:ea:21:f0:a0:1c:fd:6d:8b:53:
26:7f:53:fb:56:0f:3e:b6:1d:c3:68:6c:1c:df:93:
bb:b1:b3:67:1d:ff:a2:cd:f5:5c:85:40:f0:34:7b:
93:0e:2b:92:21:64:65:64:c4:b0:a4:cb:1b:5c:97:
4b:e3:b0:5d:e1:9c:71:40:ce:a7:12:95:50:1c:b4:
34:fb:5a:b7:c5:95:7b:9a:a2:26:f9:fa:13:95:29:
08:f4:f8:2f:a2:92:89:f7:84:e9:11:98:31:3d:d8:
e6:4d:38:be:be:46:5f:8c:bc:57:e7:78:1e:6d:65:
f3:89:a0:96:04:48:4b:4c:34:82:d5:8a:fd:49:72:
48:90:f2:be:8d:0b:c8:04:0b:d8:a1:b6:71:37:85:
67:ea:87:c7:68:9f:17:d9:c9:bb:2f:59:e3:b7:56:
9a:ff:9d:c3:e1:48:eb:87:56:09:d2:cb:c5:b6:b0:
7f:60:a9:0a:46:01:6e:d0:42:fb:14:d9:05:42:90:
c6:bb:37:83:c4:68:e7:95:8d:7a:95:41:a4:98:17:
4a:49:35:0b:d2:36:49:df:c9:37:f7:2c:bb:5a:c4:
a7:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:68:53:2E:FF:55:44:52:45:A2:F5:5A:65:E2:36:99:04:39:39:CB
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/7WhTLv9VRFJFovVaZeI2mQQ5Ocs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.42.80.0/23
Signature Algorithm: sha256WithRSAEncryption
12:57:c2:7f:e6:0f:a9:f2:f8:3f:f1:91:51:45:7e:eb:19:50:
72:cf:41:3d:4d:d9:09:99:1f:e9:bd:ae:56:07:2f:48:cc:48:
a4:e7:af:7d:bb:79:52:67:44:3f:d6:a9:72:a8:38:b2:10:58:
b5:72:b3:f7:18:28:69:eb:ac:23:18:e3:de:09:98:4b:cb:62:
a6:a9:ff:d4:80:0a:0a:26:38:92:ab:e2:23:e2:0f:81:89:c1:
cf:4d:1f:3c:fa:7c:65:3d:96:b0:c5:f0:93:43:b8:18:f1:61:
d6:f1:69:f7:78:a0:22:ee:53:8c:ce:dc:28:f2:59:61:87:13:
e6:70:b9:ce:35:0a:cd:9f:05:62:b2:3b:9a:a5:24:8e:91:d6:
d7:93:7a:b1:e5:6f:41:e1:f3:3d:62:3d:4e:73:5f:74:be:03:
2d:2d:54:fb:06:46:91:3e:07:56:b1:40:5e:89:05:54:31:fc:
f7:61:07:ed:3b:23:cc:85:26:3c:9c:5d:a6:c2:b0:6d:d6:e9:
01:30:ea:e6:9e:93:85:ed:0b:cf:f2:82:13:8f:5d:10:17:8e:
30:78:ec:dd:21:6c:57:9c:ad:5a:61:ff:69:16:11:f2:9a:6e:
97:cf:92:27:2f:e3:7c:85:dd:42:58:b1:74:da:c0:b9:7d:d4:
ef:81:35:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:49 2024 by rpki-client on console-ams.rpki-client.org